CWE-377Insecure Temporary File

Abstraction: Class · CVEs in our corpus: 95

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

Last updated: 04 July 2026 08:17 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 1 framework(s): CAPEC 2 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A01:2025 Broken Access Control.

NIST 800-53 r5 controls that address this weakness (0)AI

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2015-5224`	7.0	9.8	0.0453	2017-08-23
`CVE-2012-2666`	7.0	9.8	0.0193	2021-07-09
`CVE-2011-4119`	7.0	9.8	0.0183	2021-10-26
`CVE-2013-4561`	7.0	9.1	0.0130	2022-06-30
`CVE-2018-1053`	5.5	7.0	0.0049	2018-02-09
`CVE-2018-3710`	5.5	7.8	0.0290	2018-03-21
`CVE-2016-9595`	5.5	7.3	0.0040	2018-07-27
`CVE-2018-6704`	5.5	7.8	0.0037	2018-12-12
`CVE-2018-6705`	5.5	7.8	0.0038	2018-12-12
`CVE-2018-6706`	5.5	7.5	0.0062	2018-12-12
`CVE-2020-1981`	5.5	7.0	0.0036	2020-03-11
`CVE-2020-1991`	5.5	7.8	0.0027	2020-04-08
`CVE-2020-2016`	5.5	7.0	0.0057	2020-05-13
`CVE-2020-8027`	5.5	7.3	0.0030	2021-02-11
`CVE-2021-20202`	5.5	7.3	0.0030	2021-05-12
`CVE-2018-16494`	5.5	8.8	0.0192	2021-05-26
`CVE-2022-0736`	5.5	7.5	0.0155	2022-02-23
`CVE-2022-0315`	5.5	7.5	0.0092	2022-03-24
`CVE-2022-21809`	5.5	8.1	0.0170	2022-05-12
`CVE-2013-4253`	5.5	7.5	0.0058	2022-10-19
`CVE-2023-43498`	5.5	8.1	0.0080	2023-09-20
`CVE-2025-34194`	5.5	7.8	0.0029	2025-09-19
`CVE-2025-7707`	5.5	7.8	0.0017	2025-10-13
`CVE-2025-46369`	5.5	7.8	0.0011	2025-11-13
`CVE-2025-14307`	5.5	8.1	0.0028	2025-12-09